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INIRQQUCTlflN 

A new version of the Multics storage system has been 

installed with system MR 4.0. This version of the system will be 

much more reliable and be able to handle more storage* 



Qef jnitjons 

Several terms are used often in describing the new storage 
system's operation? 



physical volume 

volume label 
VTOC 



A disk pack* Sometimes we speak of the 
combination of pack and disk drive as the 
volume. 



Each physical volume has a 
identifies it to the system. 



label which 



Each physical volume contains a Volume 
Table of Contents (VTOC). which lists 
information about the segments on the 
vo 1 ume. 



root physical volume (RPVI The physical volume which contains 

the root directory. It also contains the 
hardcore partition. 



partition 



A block of disk storage used for a special 
purpose. 



hardcore partition A partition used for paging those segments 

which come in off the system tape or are 
created during boot l oad. 



Multics Project internal working cocument at ion. Not to be 
reproduced or distributed outside the Multics Project. 
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logical volume A set of physical volumes always used 

together. 

root logical volume <RLV) The only logical volume which 

contains directories. 

record A iQ2*»-word contiguous block of disk. 

Each volume has Multics records numbered 
starting with zero to a maximum which 
depends on the model number of the disk 
pack and drive. 

sector A 6<*-word block of disk. A sector is the 

smallest addressable unit of disk with the 
current hardware. Each Multics record 
contains 16 sectors. Field engineering 
test and diagnostic programs and some 
other special applications may use sector 
addressing* but its use is rare in normal 
operation. Since no Multics record is 
split across disk cylinders f there may be 
some sectors on a disk pack which are not 
part of any record, depending on the model 
number of the disk. 

The term "area" will not be used any more to describe a 
particular disk drives all disk drives will be identified by 
subsystem name and drive number. Drive numbers start at 1. 



Mai o r chang e*; 

There are four new rules imposed by the new storage systems 

1. All the pages of a segment are always on the same 
physical volume. In older versions of the 
supervisor* any page of a segment might be found 
on on any disk unit. 

2* All segments in the same directory are always in 
the same logical volume. This attribute of a 
directory is its "sons logical volume 10*" or 
"sons^l vid. M Usual ly, when a directory is 
created* the new directory gets the same sons_lvid 
as the parent directory* A directory whose 
sons_lvid is different from its parent directory's 
sons_lvid is called a master directory . 

3» All directories are always on the root logical 
volume* 

All logical volumes are registered. The 
registration information for a logical volume 
includes the list of physical volumes in the 
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logicai volume and the access control rules for 
use of the logical volume* 

These changes mean that if a single disk unit has a head crash it 
will be much easier to find out what segments were lost and 
whether the system can continue to run. Often, after a crash* 
the operator will be able to reload only those volumes whose 
contents were damaged* Under the old system, any head crash was 
bound to destroy a few pages each of many directories? in the new 
system only those physical volumes which are part of the root 
logical volume have directories on them* 



The contents of a physical volume look like this* 



low } Volume Label 1 

I Volume Hap I 

I VTOC header and error data I 

I I 

I VTOC 1 

1 I 



I I 

I Pages of segments I 

i I 

I 1 



I Partitions (optional) S 



Not all volumes have partitions, and the partitions may exist 
either at the top of the pages of segments (as shown in the 
picture), or between the VTOC and the pages of segments. 
Partitions must always reside completely on a single physical 
vol ume* 
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Many changes have been made to 80S. Most of these are a 
result of the new volume organ! zation. 



Con fifl-Pacte Change s 

The most important change in BOS is that the old notion of a 
partition, defined by a PART card, has been replaced* 

The PART MULT card used to define the total space available 
for Multics segments* There is no PART MULT card under the new 
storage s/stem and 30S does not Know which volumes are to be used 
for Multics paging* Only Multics has this information* 

PART cards are still used to tell BOS about the special 
areas of the disk storage which it uses for FOUMP, and for SOS 
itself, and to tell Multics where the FDUMP, SYSERR log, and HC 
(hardcore) partitions are* The new format of a PART card looks 
like thist 



This card says that the LOG partition is to reside on the volume 
mountea on drive 5 of disk subsystem DSK7* The system will 
consult the label of that volume to find where the records of the 
LOG partition are to reside* Ouring a cold boot, additional 
information is specified on the PART card for any partitions to 
reside on the RPV* 

Oisk subsystems used to be defined by 0191 or E191 or 
whatever cards in the CONFIG deck* These subsystems are now 
defined by the PRPH card, which looks like this! 



All disk subsystems have names of the form DSKx, x arbitrary* 
This card describes the 0SK7 subsystem. It is connected to IOM 
A, on channels 30-33* Drives l through 9 are model MSUO^OO 
drives, and drives 10 and 11 are model MSU0^50 drives. 

The valid model numbers are* 



PART <partname> <subsystem> <drive> 
Example! PART LOG OSK7 5 



PRPH <subsystem> <iom> <chn> <nchn> <modeli> <ni> 
Example! PRPH 0SK7 A 30 k ifOO. 9. «f50. 2 



• • • 



181. 
191* 
<+GG* 
<*50. 



□SU181 
0SS191 
MSUO^OO 
*SU0<»50 



(same as MSUg^OO) 



The ROOT card is new. it points out the location of the 
root physical volume. 
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ROOT <subsystem> <drive> 
Example* ROOT 0SK7 1 

by specifying the subsystem name and drive number* The disk unit 
pointed to must be the same as that on the PART HC card. 

A new configuration card has been provided to specify the 
sizes of certain wired-down tables* There may be more than one 
WTBL card? each card may specify up to 6 pairs of the form 
<id> <length> where the length is in words. 

WTBL <idi> <lengthi> ••• 
Example! WTBL VTB 1C24. PVT 1024. 
WTBL TTY8 2048. 

The following is a table of the valid arguments to the WTBL card? 



id 


Segment Name 


Default Lth 


0355 


dn355_data 


360. 


OISK 


disk_seg 


500. 


OST 


dst_seg 


768. 


IOBM 


iobm_data 


152. 


I0H0 


iom_data 


532. 


PRT8 


pr i n ter_trace_b uf f er 


fl. 


PVT 


pvt 


2048. 


SYST 


system_trace_seg 


0. 


TTYB 


tty_buf 


6144. 


VTB 


vtoc_buf f er_seg 


2048. 



The TTYB and PRTB cards become obsolete* and must not be used. 

If present in the CONFIG deck. they must be changed to WTBL 
cards. 

The SST card must be adjusted because the size of an AST 

entry has increased from 8 words to 12. Either the segment size 

must be increased, or the pool sizes must be decreased. For 
example, if a site has the following SST card 

SST 36. 576. 370. 110. lQ. 

then the increase in words for the new system is 
<576+37G+llQ+lG)*4/ia24* or 5 pages. An alternative woulc be to 
decrease the sizes of the AST pools and Keep the SST size 
constant. So either of the following SST cards would be 
reasonable? 

SST 41. 576. 370. HQ. l0. 
SST 36. 430. 317. 104. 10. 

A new parameter Is allowed on the DEBG card, for system 
debugging use. If the parameter CRWL is PJt on the OEBG cardt 
the system will return to BOS on every attempt to crawl out of 
ring G» with the message 
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veri f y_l ockt crawtout stop specified on debg card 

so that the system staff can take a dump. Typing GO will cause 
the system to continue operation. Another parameter which can be 
specified on the OEBG cara is the OIRw flag, which causes 
modified directory pages to he written from core whenever a 
directory is unlocked- Specifying this parameter increases the 
safety of the system at some cost in increased paging. 

A new card is used when multiple IOM's are used* to indicate 
which channels can reach a disk subsystem from each IOMs 

CHNL <subsystem> <iom£> <chn2> <ion»3> <chn3> ••• 
Example! CHNL 0SK7 B Zk 

This card is used only when more than one IOM is in the 
conf igurat ion. 

To indicate that a group of disk units are to be used for 
user I/O disk packs the former PRPH DISK card has been changed to 
the f ol I owing: 

UDSK <subsystem> <nchn> <drivei> <counti> ••• 
Examples UOSK 0SK7 2 8. 2 

This card specifies the maximum number of channels which may be 
used to support user peripheral disk I/0» if the channels are 
not required for user I/O they are available for storage system 
I/O* Up to six pairs of drive number and number of drives may be 
specified to indicate the particular units which are to be used 
for user peripheral disk I/O. A disk drive can be used for 
either storage system volumes or user peripheral packs; the 
system must be shut down to change the status of a drive from one 
to the other. 

To change the default options for all salvaging operations* 
another card is used. 

SALV <options> 
Examples SALV CNSL R6L0 

The following options are recognized! 

CNSL All output via SYSERR console 

RBLO Rebuild all directories 

PATH Print pathname of all directories salvaged 

DUMP Oump damaged objects 

OEBG debugging use only 

The CNSL option is used when all printers at an installation are 
down. All other options should be used only at the direction of 
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the system staff. 

Samofe Conf iqyra.tjon Q ec fr 

Here Is a sample configuration deck for a smaii machine* 

CPU B 6 

MEH A 128. ON 

MEM B 128. ON 

IOM A fl 4 14 24 34 



CLOK 


5 EST 






PRPH 


0SK7 A 24 4 400. 


7 * 


NEW 


ROOT 


OSK7 1 


* 


NEW 


PART 


BOS 0SK7 1 


* 


NEW 


PART 


HC 0SK7 1 




NEW 


PART 


LOG OSK7 2 


♦ 


NEW 


PART 


OUMP 3SK7 2 


* 


NEW 


UDSK 


DSK7 17 1 




NEW 


BULK 


0 512. 1 2 






PAGE 


BULK 0 100 0 







SST 30. 223* 110. 40. 6. 
INT 230 231 232 233 22 223 
OPTY OC_ 

SCHO 400000 10 10 1G0 
TCO 6. 88. 196. 192. 
TBLS STR 6 

WT8L TTYB 2048. * REPLACES TTfB 2 

PRPH OPC A 20 IBM 40. 

PRPH PRTA A 30 1600. 600. 136. 

PRPH TAPE A 22 500. 2 0 2 13 0 0 

PRPH RORA A 32 301. 

PRPH PUNA A 33 301. 

PRPH IMPW A 11 ABSI 6 

PRPH IMPR A 10 ABSI 

MPC A 30 2 A 32 2 

MPC A 24 3 

MPC A 22 1 A 23 1 

0355 A 21 A 

LSLA A 0 l 300. 1 133* 2 150. 1 300. 8. 
HSLA A 0 0 1200. 2 300. 2 4800. 8. 
HSLA A 0 20 1200. 4 4800. 4 

This setup defines a system with 7 MSUS400 drives. 



The device addresses typed to DUMP and PATCH when dumping 
specified disk addresses have been changed in a manner similar to 
the config deck changes. Requests to OUMP have the form 
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DEV < vol ume-des ignator> <device-position> <count> 

where <voi ume-desi gnator> may be one of 

<subsysfeni> <drive> 
PART <partna«e> 
ROOT 
BULK 

and <device-posit ion> may be one of 

<Multics record nuraber> 
RECORD <Multics record number> 
SECTOR <hardware disk sector number> 

Example* DEV DSK7 ** I9l7fl. 3* 

and a device address request to PATCH has the form 

OEV <vol ume-des ignator> <device-pos i t ion> <wordno> 
Example: SET OEV 0SK7 5 1G0QG 0 767676767676 



The elimination of the PART MULT card changes SAVE and 
RESTOR drastically* The command line now specifies only the SAVE 
medium and options* like thist 

SAVE <output-raedium> <options> 
Example! SAVE TAPE 1 2 ALL BRIEF 

The keywords ALL and BRIEF can also be given* and instead of 
TAPE 1 2 one could say DISK 0SK7 3 <♦ or COPY OSK7 5. SAVE (or 
RESTOR) then reads request lines from the BOS input source until 
an END request is encountered* Each request specifies one block 
of a physical volume to be dumped* Possible forms are: 

<vo i ume-designator> <extent> <ov_name> 

where <extent> may be one of 

<device-posi t ion> FOR <count> 
<device-oosi t ion> TO <lrec> 
<device-posit ion> ONLY 
ENTIRE 

Example: DSK7 3 0 FOR 6 R00T2 
0SK7 3 12 TO 17 L003 
OSK7 1 0 ONLY 
0SK7 3 ENTIRE CHARLIE 
ROOT ENTIRE RPV 
PART LOG ENTIRE RPV 
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The PVNAME specified at SAVE time will be checked at RESTOR time, 
so that physical volumes need not be remounted on the same device 
addresses. Unless ALL is specified, dumping an ENTIRE pack will 
dump only those records in the volume which are actually used* 
plus the label information* the volume map? and the VTQC* 

For example, to save the volumes on units i and 2 onto disk 
packs on units 3 and k in the sample configuration above* the 
operator might type 

SAVE OISK 0SK7 3 <♦ 
0SK7 1 ENTIRE RPV 
0SK7 2 ENTIRE CISL2 
ENO 

(Assuming that the physical volume name of the pack on unit 1 is 
RPV and the name of the pack on unit 2 is CISL2* ) The indented 
lines are request lines read by the SAVE command; each input 
request is acknowledged by a message of the form 

0SK7 i <M<*00 A 30) 0. TO 19269. 

but the SAVE does not actually start until all input has been 
typed and the ENO request given. Hhen SAVE or RESTOR begin a new 
volume of the SAVE medium, they type out a message describing 
what volume address from the Multics data is on the SAVE medium, 
in the form 

RPV <OSK7 L) 123^9. ON TAPE 3 

As each volume of the SAVE medium (tape reel or disk pack) is 
finished, SAVE or RESTOR will type out the error count. 

SAVE and RESTOR do some checking of the volume labels of 
disk packs. If an attempt is made to RESTOR the contents of one 
volume onto a volume with a valid label but a different volume 
name, RESTOR will print 

PHYSICAL VOLUME NAME OOES NOT MATCH REQUEST 
REQUEST IS FOR F003AR, EUT VOLUME NAME IS RPV 

and refuse to proceed. Similarly, if an attempt is made to use a 
storage system volume as a SAVE pack, the message 

NDISKI 0SK7 k IS MULTICS STORAGE SYSTEM VOLUME CISL3 

will be printed and no SAVE or RESTOR will be done. Instead of 
typing ENO the operator should type the QUIT request to return to 
SOS command level; he should then check the assignment of packs 
to disk units very carefully. In very rare cases, a pack will 
have an incorrect label left over from a previous use, which 
causes one of the above messages and prevents SAVE and RESTOR 
from operating. The TEST command shocld be used to clear the 
I abel in this case. 
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Changes to TEST an0 >:MT 

The TEST and FMT commands now operate on only one pack or 
part of a pack at a time. One may say 

TEST <subsystem> «drive> <extent> <options> 

Example! TEST 3SK7 3 ENTIRE WRITE PATERN 525252525252 

FMT <subsystem> <drive> <extent> 
Example* FMT OSK7 i 0 FOR 10 

and so forth. The keywords CHECK* WRITE, and PATERN still work 
for TEST, 



OUaoqes to £001 

The BOOT command now allows the operator to say any single 
command to Multics ring-i as an argument to the BOS command* The 
most common form will be to say 

BOOT STAR 

to cause the system to start up without pausing in ring i* The 
interface between BOS and Multics limits the commands which can 
be typed to foui — character items. The following commands are 
va I idt 



STAR 


startup 


MULT 


mul tics 


SALV 


sal vage_dir s 


STAN 


standard 


RPVS 


(see below) 



The printer should be ready and paper synchronized when 
boot-loading the system, since the salvager may be invoked 
automatically. If no printer is avsilable, a SALV CNSL card 
should be used* 



The new format of the COLD card and WARM card for a 80S 
bootloaa deck looks like this! 

<warm_or_co I d> <model > <chn> <drive> 
Example! COLO <*Q0* 30 1 

When BOS is bootloaded, the loader will read the label of the 
disk pack at channel 30t unit number i, as If it were a MSUo^OO 
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drive* The label of this pack Mill be checked for existence of a 
BOS partition, and the extents of that partition found in the 
label Mill be used* The 80S loader will type out a message of 
the form 

60S PARTITION AT l9i7fl. FOR l7Q« 

giving the first record address and size of the partition. If no 
SOS partition can be found, one of the following messages will be 
printed* 

CANNOT REAO VOLUME LABEL 

VOLUME OOES NOT HAVE A MULTICS LABEL 

BOS PARTITION NOT OEFINEO IN VOLUME LABEL 

these messages usually result from an incorrect COLO or WARM 
card, or leaving an incorrect pack mounted. 



For the first bootload of BOS on an empty residence volume, 
a special method must be used, since the pack has no label* In 
this case, the COLO card is replaced by the following card: 

NL ABEL <mode 1 > <chn> <drive> <device-positiOn> <nrec> 
Example: NLA BEL kQQ. 30 1 19100* 170* 

The 170-record BOS partition occupies addresses 19100-19269 of 
the MSUS^Ofi pack on drive 1, channel 30 of the bootload IOM. The 
next step is to initialize the label of the BOS residence volume, 
by means of a BOOT COLO* This rare situation is the op I y time 
that an NLABEL card should be used, since it can destroy the 
contents of the storage system if packs have been moved* 
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QPfRATQR COMMAND qHAN^fS 



The salvager is now built into the regular Multics system t 
ana if the system detects an inconsistency while bootloading* the 
salvager wiii be invoKed automat icai i y* The operator may aiso 
request the salvage of the directory hierarchy or of any single 
volume by a command* 

The disk configuration --that is* which disk drives contain 
which physical volumes -- is not expressed on the CONFIG cards* 
and so must be conveyed to the system in another way* The system 
keeps a table of which volume is on which disk unit* called the 
disk_table* and on each bootload assume s that no volumes have 
been moved until told otherwise* In the normal case* the 
operator may start the system up without typing any commands 
which pertain to the disk configuration* For a cold boot* 
however* the operator must tell the system about the position of 
all volumes with the **add_vol M and "add_.lv*" commands* which tell 
the system to acc ep t the volume if its label matches the 
registered attributes for the volume* Once the system has been 
told where a volume is* it assumes that it will not be moved* 



Before a storage system volume can be used it must be 
registered* There is a registration file for each logical 
volume* The registration file contains the data necessary to 
mount the logical volume correctly and to control Its use* For 
example* the registration file of the logical volume "root" might 
look like this* 



Ivname* root 
I vidi 
owner: 
publ let 

min_access_cl ass * 
max_access_cl ass* 
acs_path* 



22053152*^66 

Initial izer*SysDaemon 

yes 

0*000000 
7*777777 
> I v>roo t* acs 



npv* 



2 



pvname* 
pvidt 
serial * 
model * 
I ocat ion * 



rpv 



22053152^3^5 
2733-53 

onl ine 



pvname* 
pvid* 
serial * 
mode 1 * 
I ocation* 



root2 



570i<^0<«5160 
2733-59 

onl ine 
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This is a sample of the output of the "I ist_vol_registr ati on" 
command described in appendix 6* 

Since the registration file contains the name and model 
number for each physical volume in the logical volume* the system 
can tell whether a logical volume is completely mounted, or i f 
there are enough free drives available to mount all its physical 
volumes* 



ACCESS CONTROL 

In each volume registration file* several pieces of 
information about access control are kept* 



Public and Private Volumes 

A volume may be either PUBLIC or PRIVATE* Public volumes 
are like pre-*f*fl disk storage* segments on public volumes can be 
referenced by user programs subject to the normal ACL and ring 
checking* To access a segment on a private volume* the user must 
still have appropriate permission to the segment; but in 
addition, the user must have completed a "mount* - operation for 
the private logical volume* 



Access Control Segment 



In order to mount a private volume, the user must have 
appropriate access to a special segment cal led the Access Control 
Segment (ACS) for the logical volume* The location of the ACS is 
specified in the volume registration file* 



Access Isolation 



For sites which use the Access Isolation Mechanism, each 
logical volume may have a range of sensitivity levels specified* 
Segments outside the given range cannot exist on any physical 
volume of the logical volume* 



Master Directory Control 

A user may create a master directory for a logical volume 
only if he has a Quota Account for the volume, registered in the 
volume's Master Directory Control Segment (MDCS)* The MDCS lists 
all quota accounts for its logical volume, the master directories 
charged to them, and their quotas. 
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Volume Executive 

Certain users may moaify the HOCS for a logical volume* 
These users are called ^fll Mffi fi £xficjjily^s for the logical volume. 
Volume executives have **e" access to the ACS for the volume* 



□ATA BASES 

The volume registration file and the MDCS are ring-i 
segments stored in the directory >lv* The ACS for private 
volumes is stored in a directory named by the volume owner* For 
public volumes* the ACS is Kept in >lv. 

Because the system must be able to access the registration 
file of the root logical volume before it can accept the other 
physical volumes of the root* a special arrangement has been 
made* The registration data for the root logical volume is 
actually kept in segments in the root directory itself* Links 
are placed in >lv which point to the segments in the root 
directory* 

If the system cannot locate a registration file for the root 
logical volume at startup time it recreates one. since the system 
requires this segment in order to operate* 



REGISTERING VOLUMES 

A new operator command* ""add_vol_registration M (avr) is used 
to register all volumes except the RPV. The add_vo l_registrat ion 
command can be executed in ring 1 or ring km A sample call to it 
might look like this* 

avr pv pubd<* -Iw public 

In this example the physical volume named "pubo<» M is being 
registered as a member of the logical volume named "public." 

Each physical volume must be registered before it is 
initialized. When the physical volume is initialized* 
registration information from the volume registration data is 
copied into the physical volume label. Whenever the physical 
volume is mounted* the physical volume label is checked against 
the registration data* 

Many control arguments may be specified to the 
add_vol_registration command* A complete description of the 
command is provided in appendix 8* 

The "change_vo l_registrat ion"* "del_vo l_registration*% and 
"I ist_vol_registration" < M cvr'\ M dvr M * and M lvr M > commands are 
also provided to change* delete* and list the volume registration 
data* These commands are also described in appendix 8* 
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A special coiraand is provided for regenerating the 
registration data for a physical volume if the registration data 
was destroyed in a crash* the command 

reregister <pv_ name> <drive> 
Example! reregister george dskb_a^ 

Mill cause the system to read the label of the physical volume on 
the specified drive* and if its volume name is correct* to 
regenerate any missing parts of the registration data. This 
operation is performed automatically as part of startup for all 
volumes which are part of the RLV* 



VOLUHE INITIALIZATION 

The "init_vol*" command takes a blank disk pack and 
initializes it to be a Multics storage system physical volume by 
writing a label, an empty volume map* and an empty VTOC on the 
pack* Each volume must be initialized before it can be used by 
the storage system. 

Only registered volumes can be initialized* 

The init_vol command reads the label of the physical volume 
it is supposed to register before writing on it* If the label is 
a valid-appearing Multics label* for any other volume. init_vol 
will print an error message and refuse to proceed* This check is 
a safety feature to prevent the accidental destruction of the 
contents of a valid physical volume* In rare cases a pack may 
have a valid-appearing label from some previous application which 
prevents it from being relabeled* In such a case the pack should 
be erased first before init_vol is invoked* 



Mou nting Volumes 

Nhen the system is boot loaded, the hardcore system runs in 
the hardcore partition defined on the RPV by the PART HC card in 
the configuration deck* Ouring file system initialization, the 
root directory is located and that section of the directory 
hierarchy which resides on the RPV is made available for the 
system* The root logical volume is defined at this time. Other 
PART cards may point to other disk units? if so* the partitions 
will be located by looking at the labels on the packs on these 
units but segments on these volumes are not made available for 
Multics use during hardcore initialization* 

This is the situation when the system comes up in ring i* 
Only the root logical volume is defined, and the only physical 
volume being used is the RPV. This is the only time that the 
system operates with a partially mounted logical volume* 
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The operator's normal action is to issue a series of add_vol 
comraanas to cause the other volumes of the root logical volume to 
be mounted* and then to issue add_lv commands and add_vol 
commands for additional logical volumes and the physical volumes 
that make them up. 

The operator may list the disk table to find out which disk 
drives are mounted by issuing the "I ist_di sks" ("ld~) command- 
Its output looks like this: 

dska_01 root2 root 

dska_ 02 new (blue) * 

dska_Q3 (io drive) 

dska_0<* 

dska_Q5 (deleted) 

dska_C6 true (blue) *** 

dska_Q7 

dska_0 8 

dska_09 

dska_i0 

dska_ll 

dska_12 rpv root 

dska_l3 

dskb_0i 

dskb_G2 

dskb_03 

dskb_0<* 

dskb_05 



In the example* the operator has issued the command 



add_vol root2 dska_01 



to complete the root volume. The one star after the line for 
dska_Q2 indicates that the pack on dska_Q2 is aSSAjmj&o; to be the 
physical volume "new" of the logical volume "blue*** Since It is 
assumeat the system has not yet read its label* The three stars 
after the line for dska_06 incicate that the pack on dska_Q6 is 
fcaojsQ to be the physical volume "true** of logical volume "blue** 
the system has read the label of dska_06 and it matches the 
registration for physical volume "true." The add_vol command 
makes a volume known* but does not make It available for paging 
unless an add_lv is pending and this add__vol completes the 
logical volume* The parentheses around the logical volume name 
indicate that the logical volume "blue" is unavailable for 
paging. 

To cause all assumed and known physical volumes of a logical 
volume to be accepted for paging* the operator Issues the add_.lv 
command. If this command is issued when some physical volumes of 
the logical volume are not listed in the disk table* the system 
will type out mount messages for each physical volume and will 
then assume that the physical volumes will be mounted on the 
specified volumes* The operator will then type add.vol commands 
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for each physical volume which has been requested. When the last 
add_vol command is typed, the system will respond with a message 
saying that the logical volume is mounted* 

In the example above, if the logical volume "blue** were 
registered to contain cniy the two physical volumes M new ,s and 
•"true,** the operator could issue the command 

add_l v b I ue 

to cause the label of aska_02 to be read and checked, and to 
cause both physical volumes to be accepted for paging and the 
logical volume to be made available for user use* The system 
would type the message 



public Iv blue mounted 

and the output of list__disks would then look like this* 

dska_Gi root2 root 
dska_02 new blue 
dska_03 (io drive) 
dska J3<* 

dska_05 (deleted) 

dska_Q6 true blue 

dska_07 

dska_G3 

dska_09 

dska_iQ 

dska_li 

dska_12 rpv root 

dska_l3 

dskb_Qi 

dskb_Q2 

dskb_03 

dskb_Q<* 

dskb_05 

physical volumes which are being used have no stars after their 
name* 

If the system has been brought up after packs have been 
moved, the disk table may show certain assumptions which are no 
longer true* The del_vol (dv) command can be used to erase the 
entries for assumed or known physical volumes from the disk 
table* The del_vol command does not do anything to any disk 
drive? it Just changes the table* 
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At this point it may appear that the operator has to type an 
add_vol command for each physical volume and a add.lv command for 
each logical volume* in order to get the system started. Not sot 
default assumptions have been built into the system to eliminate 
extra commands when they are not necessary* 

Whenever the Initializer process crosses from ring i to ring 
<♦* as a result of the "startup"* "raul tics"* or "standard- 
commands* the system does an automatic "add.lv root" to insure 
that the root logical volume is complete. If the root cannot be 
completed* the system remains in ring i* since otherwise It might 
attempt to access a directory which was not mounted* 

Whenever the Initializer process attempts to start the 
answering service* as a result of the "startup" or "multics" 
commands* or when a "reload" command is issued* an automatic 
"add_.lv -all" command is executed to attempt to mount all logical 
volumes which are not in use because one or more of their 
physical volumes is Known or assumed* If any logical volume 
cannot be completed* the answering service startup Is not 
attempted* The operator may then use the del_vol command to 
correct the disk table and try startup again, or may use add_vol 
to obtain the missing volumes* 

These default assumptions mean that if the operator Just 
types "startup" in ring 1* as he is used to doing* all volumes 
which were in use at the time of shutdown will be re-accepted and 
the system will resume operation* If the operator issues the 
command "BOOT STAR" to BOS* and if all physical volumes are where 
they were at the time of the last crash or shutdown* the system 
will not even pause in ring 1* But if there is any trouble* the 
system will wait for an operator command instead of plunging 
ahead blindly* As described below* the salvager has been 
integrated into this scheme so that if salvaging is necessary it 
is invoked automatically* 

These changes are part of a general plan which will allow 
the system to be left in unattended mode* with a 80S runcom which 
will reboot the system if it crashes* 



jtefflfliiD.ilaa-.lto ium&s 

A physical volume may be in one of the following states! 
i* Not mounted 

2. On the drive but drive not ready* 

3« Drive ready* system unaware of contents. 
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**• Known (system has read label)* 

5* In use for storage system or I/O* 

The add_vol and add_.lv commands can move a physical volume to 
highei — numbered states* There are also commands for moving 
physical volumes bacK down. 

The command 

del_.lv <lv_name> 
Examples del.lv blue 

causes the system to make all segments on the logical volume 

<lv_narae> unavailable to users* and then causes the orderly 

shutdown and unloading of each physical volume contained in the 

logical volume* As each disk unit is unloaded a message of the 
form 

demounted dska_02 

will be printed* Since segments which users may be using are 
made unavailable by the del_.lv command* the operator should use 
this command only when he is Instructed to do so* 



Since the system will encounter errors if a disk drive is is 
stopped manually when it shouldn't have been stopped* the 
software is designed to support the following rule* 

Never stop a disk drive manually while 
Mul tics is in operation* 

When the system demounts a disk pack* either a storage system 
physical volume or an I/O pack* it will always unload the disk 
drive by program control* 

Qfa a n oes to Old Qoerafor Comma nd s 

adddev* addd Now allowed in ring l as well as ring km 

This command may specify a storage system 
disk drive which has been deleted by the 
deldev command* 

del dev. deld Now allowed in ring l as well as ring 

This command may specify a storage system 
disk drive* If the drive is currently in use 
for paging, an error occurs* Otherwise* the 
drive is made unavailable for storage system 
use* 

force_reset Name changed from •"force*"* 
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storaget stor Abbreviation changed from M dvm M * Output 

format changed* 

multics, mult Now mounts volumes if necessary. 

standard, stan Mom mounts volumes if necessary* 

startup, star Now mounts volumes if necessary* 
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The storage system structure repair procedures known 
collectively as the salvager have been extensively modified in MR 
^•0* both for automating crash recovery and for handling the 
structural changes in the storage system data* The salvager 
programs are now part of the standard system tape; new salvaging 
modes have been introduced and some old nodes redefined; and 
control of the salvager is now from command options rather than 
from the processor switches* There are now four kinds of 
salvaging operation which the system can perform* These are 
emergency shutdown* volume salvage* directory hierarchy salvage* 
and on-line salvage* The system has been modified to invoke the 
salvager automatically whenever data in the storage hierarchy may 
have been damaged* 



£ffificqencY Shutdown 

Emergency shutdown has been reworked completely and greatly 
improved* It is much more reliable than in pre-*i*0 systems* 

Sometimes the system crashes before the storage system has 
been turned on* Previously* an attempt to emergency shutdown in 
such a situation would lead to another crash* and might do 
serious damage to the directory hierarchy* This has been changed 
so that if a premature emergency shutdown is attempted* the 
following message is printed* 

ESO BEFORE FS ENABLED 
SHUTDOWN COMPLETE 

and the directory hierarchy is untouched* 

It is always safe to attempt an ESO* and if emergency 
shutdown crashes it may be retried* 



Volume salvaging insures that there are no reused addresses 
or ill-formed VTOC entries in the VTOC and volume map of a single 
physical volume* 

If a volume was in use by Multics and was not demounted or 
shut down by normal or emergency shutdown* it will be salvaged 
automatically the next time that the physical volume is accepted 
for paging* 

The operator may force the volume salvage of a particular 
volume by typing the command 

salvage. vol <vol_name> <drive> <options> 
Example! salvage_vol new dska_02 -check^dir 



MULTICS OPERATING STAFF NOTE MOSN-AGOi 



page 22 



This operation cannot be done once the volume has been accepted 
for paging. Options way come from control arguments or from the 
SALV card- The "-checked ir*" option causes the connection between 
the VTOC entry and the segment's directory entry to be checked? 
if there is no directory entry for the VTOC entry* the VTOC entry 
Mi I I be del eted. 

To cause the volume salvage of all physical volumes which 
are assumed present or known but not yet in use* issue the 
command 

salvage^vol -all <options> 

A special interface is available to force the volume salvage 
of the Root Physical Volume. Typing 

800T RPVS 

will force the RPV to be salvaged during boot load. (Part of the 
directory hierarchy on the RPV will also be salvaged* as 
described below.} The RPVS option may be combined with any other 
command* so that 

BOOT RPVS SALV 

is a valid command* which calls for a volume salvage of the RPV* 
a salvage of the directory hierarchy existing on the RPV* and 
then a directory hierarchy salvage of all directories. 

The "-check_dir M option for the salvage_vol command cannot 
be used on volumes which are part of the RLV. Volume salvaging 
can only be done on un-accepted volumes; but in order to do the 
-check_dir operation* the the RLV must be completely accepted so 
that all directories can be looked at. If the directory salvager 
destroyed a branch for a segment on the RLV* the "orphan" VTOC 
entry would never get cleaned up if Multics were unable to 
connection salvage. A special scheme is provided to do a 
salvage_vol of a caay. of any physical volume of the RLV. Using 
80S* the operator copies the physical volume or physical volumes 
to be checked onto scratch packs. After bootloading the system* 
the operator then tyoes 

salvage_vol <pv_name> <drive> -copy <drive2> 
Example* salvage_vol root2 dska_0i -copy dskb_05 

changes* if any* are made to the copy* not to the version of the 
RLV pack that the system is running on. After all salvage 
operations have been done* the system can be shut down and the 
salvaged copies used to replace the old versions. 
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Hierarchy salvaging is the most like the pre-**.G salvagers 

it corrects all errors in directories* rebuilding the directories 

if necessary* The directory hierarchy salvager is invoked by 
operator command by typing 

salvage_dirs <options> 

Examples sal vage_dirs -check_vtoce 



The •"-check_vtoce M option specifies that connection from the 
directory entry to the VTOC is to be checked? if a directory 
entry has no VTOC entry it will be deleted. The "-rebuild** 
option specifies that all directories should be rebuilt. Both of 
these options increase running time substantially* 



RPV SALVAGING 

Whenever a volume salvage is done on the RPV* the directory 
hierarchy salvager is invoked to salvage the root directory and 
every directory at up to two levels below the root if all the 
directory* s parents are on the RPV. This operation is done in 
order to make sure that the system can complete boot load and come 
up to ring 1 command level. 



RLV SALVAGING 



Before leaving ring 1, the system automatically salvages 
directories down to level trree of the directory hierarchy If any 
volume of the root logical volume was automatically volume 
salvaged. This action, called RLV salvaging, is taken because 
such a volume salvage may have detected a reused address and 
introduced a page of zeroes into a crucial directory. 



Qf) l ine Salvager 

The on-line salvager is invoked by recovery mechanisms when 
certain software errors or hardware failures occur. It can also 
be invoked manually by a system programmer who calls 

hphcs_$sal vage_directory (path) 

The MR version of the on-line salvager has been subst en tla 1 1 y 
improved over previous versions. 
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The paging device* if present in a configuration* will be 
flushed in stages as each volume is accepted. Except in cases of 
emergency* the foiiowing rule should be observed! 

After a crash? try ESD. 

If emergency shutdown does not complete* make 
sure that all volumes in use at the time of 
the crash are accepted during salvage. 

Observing this rule insures that all information on the paging 
device will be flushed back onto the volume where it belongs. 

The system will not exit from ring i until the paging device 
has been completely flushed* 
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hfEH ERROR ME SSAGES 



Ejujt ics p isk £rror fj^ ssaaes 

These messages have been changed to show the subsystem and 
drive number. The general error will look like this* 

disk_cont rol i dev attention for dsk7 4 (lorn i chn 30) cmd 42 

Stat 422000000000* 
disk_control t dsk7 4 sect=765* cyl=i4* hd=0* addr=i3370. 
disk^ control \ dsk7 4 detailed status* 40 GO 00 80 00 00 

The detailed status message will only be printed in cases where 
it is useful* If the disk unit is unusable* for example if it 
has gone into standby state* the message 

disk_cont rol s dsk7 4 requires intervention* 

will be printed and the alarm will sound* The operator may ready 
the drive, after correcting the problem; the system will then 
type 

disk_cont rol t dsk7 4 now operative* 



and attempt to use the disk unit again* 

The other possible error messages about disk will not, in 
general* require operator intervention* 

disk_cont rol I ION system fault for dsk7 4« 
disk_cont rol * Ignored special on dsk7 4. 

disk_control I Interrupt from unknown devx 7* sx 7. 

status = 422000000000* 
disk_ control * Lost IOM interrupt for dsk7 4 (iom 1 chn 30)* 
disk_control 1 Unexpected IOM status 422000000000777000000 000 

for dsk7 4 (iom l chn 30)* 
disk_control l dsk7 4 tally residue - 000i* 



8P$-Plsk-5crftr, flessaqg 

The error message printed by BOS for a disk error is similar 
to the Hultics message* It looks like this? 

ERROR ON M400 A 30 4 (0SK7) 

CM0=32. S=3445* AOOR=666000, STAT= 422000 777000 
DETAILED STATUS! 22F0 0 0 0 00 0 004O0Q 



The subsystem name (OSK7 in the example) may be replaced by stars 
if BOS has not yet read the CONFIG deck* 
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If the operator attempts to boot the system with the clock 
set to an obviously baa value, the system Mill crasr with one of 

these messages* 

init_pvt« clock malfunctioning 
init_pvt* incorrect clock setting 
init_pvti clock reads time before rpv label 

this crash occurs before any changes are made to the disk 
contents. 

An attempt to boot the system wi th a non-root volume where 
the RPV should be will usually result in a crash with one of the 
messages 

init_pvti no root 

init_pvt* dska 3 has no Mul tics label 
init_pvtt no part he on root dska 3 



the ROOT card must be corrected* or the contents of the RPV 
restored. Once again* no changes have been made to the disk 
conten ts. 
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CHANGES TO OPERATIONAL PROCEDURES 

Several of the standard operatiora! procedures are affected 
by the new storage system. 



The system programmers will have set up some new RUNCOM 
files for the standard SAVE procedures. At least the following 
Hi I I be provided! 

SAVET Save all volumes to tape 

RESTT Restore all volumes from tape 

When a new volume is added to the system, or any volume is moved 
from one disk unit to another* these RUNCOM files must be 
updated* 



The regular incremental* catchup* and complete dumping 
procedures will not change too much with MR *♦•()* but the 
installation management may choose to rearrange the dump control 
files. 



Changing Disk fionf |gurat { on 

If the PRPH OSKx card is changed* the system is unable to 
assume anything about the location of any volumes on the next 
boot loaa. So after a change to the PRPH OSKx card* the operator 
will have to type an "acd_vo I" command for every volume in the 
system. 



In order to add a new volume to an existing logical volume* 
the operator must shut down and reboot* and type an 
"initia I ize_dlsk" command for the new volume when ring l command 
level is reached. 



Cras h Recovery 

Many internal changes have been made to Multics so that it 
will crash less often and make crashes which do occur easier to 
recover from. 
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PAGING DEVICE RECOVERY 

After a system crash, the standard procedure is to attempt 
an ESO first. If ESQ fails or cannot bo attempted because core 
has been lost* do a 

BOOT SALV 

to cause the salvager to be run. If the ESO was not done* the 
following message will be printed when the salvager is 
boot I oaaed i 

init_pvti paging device will be flushed! 20^0 records 

If this message occurs* The paging device records for each volume 
will be flushed onto the volume as it is accepted for paging* 
(This operation taKes a few extra seconds for each volume*) At 
the end of salvaging* if the operator types "startup"** 
"standard", or "multics"* the system will attempt to enable the 
paging device* and if successful will print the message 

enabled pdi 20<*0 records 

giving the size of the paging device. If some volumes* which 
were mounted at the time of the crash* don't get accepted during 
the next bootload (salvager or regular)* the paging device may 
contain pages which must be flushed before the paging device can 
be used for regular paging. The system will refuse to enter 
normal operation if this is so* and will print 

errori paging device unflushed. need 2 vols for 78 recs 
Commands 

The system Mill not enter standard mode (ring until the paging 
device is completely flushed. In some cases* for example if a 
pack has a head crash* it may be impossible to flush the paging 
device completely; in other cases* for instance if a disk MPC 
goes down* several bootloads with different volumes on-line will 
be required to get all PO records flushed. Once all flushable 
records have been flushed* the operator must issue the command 

f orce_pd_abandon 

to clear the paging device of records which cannot be flushed. 



DISK UNIT FAILURE 

Often* only one disk pack or disk unit is Involved in a 
system failure. The symptom that an operator will notice is a 
burst of write error messages for the drive* and then a message 
like 
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disk_control * dsk7 requires intervention. 

with an audible alarm* The error messages may repeat 
periodically* In some cases* the system crashes when a disk unit 
fails; but often the system Mill continue operating although 
without the availability of segments on the device affected* If 
a disk drive has dropped into standby* and the system is still 
operating* the operator should attempt to ready it* If the drive 
can be made ready* the system will print 

disk — control t dsk7 ** now operative* 

and attempt to use segments on the drive again. If there has 
been a head crash or the disk unit has become unusable* the 
operator must shut down* substitute a spare or repaired disk pack 
and drive, and use RESTOR to restor the contents of the volume 
from the last SAVE by typing 

RESTOR input_medium 
0SK7 ** ENTIRE USER_PACK_8 
END 



and mounting the appropriate tapes or SAVE packs* The next step 
is to reboot the system, and reload the segments which have 
changes since the SAVE by issuing the following command * 

reload -pvname user_pack_8 



and allowing reload to scan all catchup and incremental tapes 
made since the SAVE* If the site has a paging device, and there 
are pages for the damaged volume on the paging device, it would 
not be safe to flush these pages back onto the new pack, even 
after reloading! so the system staff will probably have to zero 
the paging device as described above* 

If several volumes are damaged, and some are from the RLV, 
these volumes should be reloaded before non-RLV volumes are 
attempted* 



Checking Num ber of Record s teft 

The system handles out-of-disk much better; running out of 
disk on most volumes is no longer a system crash, although it may 
annoy users with segments on the volume* 

The device_meters command no longer tells how many records 
are left* To get a summary of what volumes are on-line and how 
much room is left on them, type 

list_vols 



while in admin mode* The output is sorted by logical volume 
name* If the argument **- 1 v NAME** or M -pv NAME" is given, only 
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that physical or logical volume Mill be listed* The output looks 
like this* 



Orive 




Records 


Left 


VTOCS 


Left 


PV name 


LV name 


dska_Q2 


P 


17752 


3688 


2317 


1850 


rp v 


root 


dska_0*f 


P 


17752 


3333 


2817 


1865 


cisl 2 


root 


dska_03 




18322 


M02 


<*135 


2^38 


Idd 


1 ibraries 



The "P" flag above indicates those drives containing partitions* 
If the •"-total" argument is given, the output is 

Records Left VTOCs Left LV Name 

18322 <*102 *#135 2*»38 libraries 
3550^ 7021 563<* 3715 root 

and the operator "storage*" command now does a "list_vols -tt""* 
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APPENDIX A 

LIST OF OPERATOR CQHMANOS 

The foi lowing list shows all ring-i and ring-** commands* 
Unless otherwise noted in the "Ring*" column* the command is for 
ring-** only* 



Command 


Abbrev 






abs 


abs 






accept 


acce 






add_l v 


a 1 v 


ki ii 

NEW 


both 


add_vol 


av 


NtW 


bom 


add_vol_regis tr at ion 


avr 


MC Li 


ooTn 


addcpu 


addc 






adddev 


_j j -j 

duOQ 


pur 


DO Tn 


aoumem 


a O Qm 






aaapage 


o HI Hlr\ 
aUQP 






admin 








aTtacn 


a t Ta 






DOS 






DOTn 


bump 








change — vo 1 _ regi strati on 


cvr 


NtW 


po Tn 


cripple 


crip 






define 


def i 






dei^i v 


Hit* 

Ql V 


NtW 


DOTn 


de 1 _ vol 


dv 


NtW 


DO t n 


del — vol ..registration 


M a* 

d vr 


1ICU 

NtW 


DO Tn 


del cpu 


de Ic 






deldev 


oe lu 




do t n 


deimem 


oe im 






del page 


de ip 






deroute 


dero 






a e Tacn 


oe fa 






QcVS i op 








down 








ur up 








o v a 








f orce_reset 




CHG 




f orce_pd_aoandon 




NEW 


ring- 


go 








he 1 p 






ring- 


hmu 








init.vol 




NEW 


both 


intercom 


ic 






list_disks 


Id 


NEW 


both 


1 ist_vol ..registration 


1 vr 


NEW 


both 


1 ogin 


logi 






1 ogout 


1 ogo 






maxuni ts 


maxu 






mc_l ist 








mc_on 


mc 







MULTICS OPERATING STAFF NOTE MOSN-AOOi page 32 



message 
mul tics 
no_start 
quit 
rep 

redef lne 
re I oad 

re I oad_sys te»_re lease 
remove 
repl y 

reregister 
reroute 
reset 
route 

sal vage_dirs 
sa I vage.vol 
shutdown 
standard 
startup 
stop 
storage 
substty 
sysid 
terminate 
unbump 
undef ine 
warn 
who 
word 



mess 

mult CHG both 

ns 



rede 

both 
ring-i 

remo 
r 

NEW ring-i 

rero 
rese 
rout 



salv NEW ring-l 

sv NEW both 
shut both 

Stan CHG ring-i 

star CHG both 

stor CHG 



subs 
sysi 
term 
unbu 

unde 
w 
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APPENDIX 8 

COMMAND DOCUMENTATION 



Only new commands are written up in this section* Consult the 
Multics Operator's Handbook for other commands. 
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add_vol_registr at ion* avr 



LUQClifiQ 1 Register a new physical volume. If the logical volume 
does not already exist, register the new logical volume also* 

Syn t a x I add_vol_registr at ion pv pv_name control_args 



pv 

pv_name 
CftDtroJ Argu ment s* 
-Iv LVNAME 

-model MOONO 



is the literal string "pv" 
is the physical volume name 



Specifies the logical volume name* 
argument must be provided* 



This 



Specifies the Honeywell model number for the 
disk pack* If omitted* the default is *»00* 
The following are valid values for MOONOt 



i8i 
191 
<»00 
^50 



0SU181 
0SS191 
MSUO^OO 
MSU0450 



serial SER 



Specifies the manufacturer's serial number 
for the pack* If this argument is omitted, 
the default is "none**" 



The remaining arguments are valid only when a new logical volume 
is being registered. Otherwise they are ignored* 

-owner Person*ProJ ec t Specifies the user identifier of the 

volume owner. If omitted the Person. ProJ ect 
of the user executing the command is used* 



-access_low xxx 
-access_high xxx 
-public YESNO 



Specifies the minimum sensitivity level for 
information on the volume. 

Specifies the maximum sensitivity level for 
information on the volume. 



Specifies whether the volume is public, 
omitted the default Is "yes." 



If 



-acs PATH 



Specifies the path name for the ACS. 
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Nam e t change_vo l_registration* cvr 

Function* Modify logical volume or physical volume registration. 

Syntax : change_vol_registration pv pvname control_args 
change.vo ^registration Iv lv_name control_args 

pv is the literal string "pv" 

pvname is a physical volume name 

Iv is the literal string "lv M 

Jv_name is a logical volume name 

Con tr ol Arguments* The following control arguments are valid 
when "pv** is specified! 

-model MODNO Specifies the Honeywell model number for the 

disk pack* The following are valid values 
for MOONOt 

181 DSU181 

191 0SS191 

400 MSUQ40Q 

450 MSU045Q 

-serial SER Specifies the manufacturer's serial number 

for the disk pack* 

-location LOG Specifies the current location of the disk 

pack* 

-date_registered OATE Specifies the date the physical volume was 

registered* 

-name PVNAME Specifies the physical volume name. 

-pvid PVIO Specifies the unique identifier of the 

physical volume* 



The following arguments are valid when "Iv" is specified! 

-owner Person.Proj ect Specifies the user identifier of the 

volume owner* 

-access_low xxx Specifies the minimum sensitivity level for 

information on the volume* 

-access_high xxx Specifies the maximum sensitivity level for 

information on the volume* 

-public YESNO Specifies whether the volume is public. 
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-acs PATH 



Specifies the path name for the ACS. 



-name LVNAME 



specifies the logical volume name. 



*Jvid LVIO Specifies the unique identifier of the 

volume*. 

Notes: Changing the name or unique ID attributes of a physical 
volume or logical volume is an operation which is only done to 
correct a wrong registration file. The volume label is not 
affected by the change to the registration file* and simply 
changing the registration file will usually have only the effect 
of making the volume or logical volume unmountable 
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del_vol_registrat ion, dvr 



EyQCH&Q* Unregister logical volume or physical volume. 



5*0 lax* 



de l_vol_registrat ion pv pvname 
del_vol_registrat ion Iv lv_rame 



Arguments * 
pv 

pvname 
I v 

I v_name 



is the literal string "pv** 

is a physical volume name 

is the literal string "Iv" 

is a logical volume name 



When *"pv" is specified, the command Mill refuse to leave a 
logical volume with no physical volumes in it* 

When unregistering a logical volume, the physical volumes being 
releasea will be listea. 
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I ist_vol ^registration* Ivr 



Functipn : Print registration information for logical volume or 
physical volume* 

Syntax t I ist_vol_registr3f ion pv pvname 

I ist_vol _registrat ion Iv lv_name control_arg 

pv is the literal string "pv" 

pvname is a physical volume name 

Iv is the literal string "Iv" 

I v_name is a logical volume name 

SQPiCfll ACflUfflfiQtS* It "«v" is specified, the '"-brief" C-bf"> 
argument lists only physical volume names* 

I ist_vol_registrat ion Iv root 
Ivnamet root 



I vid J 
owner i 
publ id 

min__access_c I ass * 
max_access_cl ass* 
acs_path* 



220531524466 

Initial izer *SysOaemon 

yes 

0*000000 
7 1777777 
> I v>roo t* acs 



npvt 



2 



pvname* 
pvid* 
serial * 
mode I * 
I ocat ion * 



rpv 



220531524345 

2733-58 

400 

oni ine 



pvname* 
pvid* 
serial * 
mode I t 
I ocat ion * 



root 2 



57Q144Q45160 

2733-59 

400 

onl ine 



I ist_vol_registration Iv root -bf 
rpv 
root2 
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Njaroe : add_vol» av 

Fupct iPQ* Tell the system that a physical volume is on a disk 
drive* Read and check the label. 

Svntaxi add_vo! pvnaee drive_name 

add^vol -all 

pvname is the name of a physical volume 

drive_name has the form <subsys>_<nn> 

£&aiLol Arguments' 

-all Mount all assumed physical volutes 

Nof e§< The registration file for <pvname> is consulted to find 
out the logical volume name and to validate the label* 

The volume label is read and checked* If the label is correct 
the drive is left in the kncwn state. 

If an add_lv command for the logical volume containing this 
physical volume has oeen previously issued* and if this add.vol 
command completes the logical volume* the logical volume is 
accepted for paging and a message is printed* 
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iiaJEfi * add_lv, a I v 

EuBGliaQ* Cause a logical volume to be accepted for paging. 

*LXui.d&* add_lv i wjiase 
add_l v - a i I 

I v_name is the name of a registered logical volume 

-all Mount all incomplete logical volumes* 

MQtfiS 1 If alt physical volumes for the logical volume are 
already accepted* Known, or assumed, add_l v will insure that all 
labels have been read and checked, and will then accept the 
logical volume for paging. 

If one or more volumes are missing, add_Jv will assign drives for 
the missing volumes, print mount messages for each missing volume 
In the form 

mount pv k2Q2 on oska_07 

and set the assigned drives into the assumed state* The operator 
may mount the physical volumes where requested or use his own 
Judgement* As each physical volume is mounted, the operator will 
issue an add_vol command to the system; the last add_vol command 
will cause the logical volume to be accepted with a message of 
the form 

private Iv cp22 mounted 

When the add.lv command is issued, all assumed drives should have 
the correct contents; otherwise an error message will be typed* 

The list_disks command lists all outstanding add_lv's* 

The del_lv command can cancel an outstanding add_lv* 
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HajS£j del_voU dv 

Function* Tell the system that a physical volume is no longer on 
a drive* 

Syntax* del_vol drive_na«e 
Arguments * 

drive.name has the form <subsys>_<nn> 

Notes* The drive specified may not be in use* See the del_lv 
command for demounting logical volumes which are in use* 
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Name! del_lv* dlv 

f un ctlppi Tel 1 the system to force the demounting of a logical 
vol ume. 

Syntax* del.lv I vname 

I vname specifies the name of a logical volume 

tyotes: If the logical volume is in tfce process of being mounted* 
this command cancels the request* 

If the logical volume is already mounted* this command makes the 
segments on the volume unavailable to all users* and shuts down 
and unloads all physical volumes in the logical volume with a 
message of the form 



demounted dsKa_a2 
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Maffl£' init_vol 

Fun ctj on, * Hrite the label of a new physical volume. Set up its 
VTOC and volume map* This operation destroys any previous 
contents of the physical volume. 

?vn tax i init_vol pvname drive_name control_arg 



is the name of a physical volume 
has the form <subsys>_<nn> 

Contrpj Arguments,! 
-special Enter dialogue with the operator. 

In special mode the operator may specify the position and size 
of partitions on the physical volume. 

The following request lines may be typed 

part NAME HILOW SIZE Where NAME Is a ^-character partition name, 
HILOW is either -high- or "low", and SIZE is the 
partition size in records. 

avg FFF»FF Specifies the average segment length for segments on 
the physical volume. The default length is 5.0* This 
number is used to calculate the number of VTOC entries 
on the volume. 

list lists the partitions defined so far. 

end causes the physical volume to be initialized. This 

operation takes about 90 seconds* 

quit causes an exit without doing anything. 



Ar_auffl£al£* 
pvname 
dri ve_name 
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list_disks f Id 



£y0£li£Qi List the usage of storage system disk drives and aft 
pending add_lv - s« 



Syntax t list_disks arg 

is the name of a drive to be listed 



dr ive_name 



C.o.DlQO.1 iL^yifiQls.: 
-Iv LVNAME 
-pv PVNAME 
-brief* -bf 
-mount* -mt 



list only drives pertaining to LVNAME 

list only drives pertaining to PVNAME 

list only nonempty drives 

list only pending add_lv*s 



I ist_disks 



dska_0i root2 root 
dska_G2 new (blue) * 

dska_03 (io drive) 
dska_0<* 

dska_05 (deleted) 

dska_06 true (blue) *** 

aska_y 7 

dska_08 

dska_Q9 

dska_iO 

dska_ii 

dska_i2 rpv root 

dska_13 

dskb_01 

dskb.02 

dskb_G3 

dskb_0<* 

dskb_0 5 

public Iv blue mount in progress 
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MaiBfi 5 reregister 

Function* Regenerate volume registration information. 
Synt ax I reregister pvname drive_name 



pvname is the name of a physical volume 

dr i ve_name has the form <subsys>_<nn> 

Hot esi This cosmand reads the label of the volume on the 
specified drive name* If it is a valid label for the volume 
whose name is given* the registration data is refabricated from 
the label and the drive is left in the Known state. 
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Hams* 



f orce_pd_ aoandon 



function! Discard all data on the paging device. 




ACflii mfiQlS * n on e 

lialfii* This command destroys information. It should be used 
only after a system catastrophe which has left pages on the 
paging device whicn cannot be flushed; and the command should 
not be invoked until all physical volumes which can accept data 
from the paging device have been flushed. 
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Njames sa I vage_dirs» salv 

£MD£liflQ* Salvage the directory hierarchy. 

§yf>tax» sal vage„dirs control_args 

Argu ment^ * none 

Con t rpf Arguments! 

-check_vtoce Delete branch if VTOCE missing 

-rebuild Rebuild all directories 

-pathname Print pathname being processed 

-long -check_vtoce -rebuild -pathname 

-console Output to SYSERR console instead of printer 

-dump Dump damaged objects 

-debug System programmer use only 

-level N Salvage levels C-N only 

The SALV card may specify some default options. 
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HajjeJ 



salvage_vol» sv 



Function. * Volume salvage a physical volume* 



saivage_voi pvname arive.name uoufroi.args 
salvage_vot -all control_args 



ACflUItt&QlS' 



pvname 

dr i ve_name 



is the name of a physical volume 
has the form <sub sys>_<nn> 



-consol e 
-check_dir 
-copy DRIVE 
-dump 
-debug 



Output to SYSERR console instead of printer 
Delete VTOCE if no branch 
Salvage inactive copy on DRIVE 
□ump damaged objects 
System programmer use only 



N,otes; If -all is specified* all known and assumed physical 
volumes are salvaged* 

An accepted physical volume cannot be salvaged* 

The -copy option is used to salvage a copy of an active volume* 
usually because the operator wishes to use the -check_dir option 
on a volume of the RLV* 

The SALV card may supply some default options* 



